Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/c25d7a46-dff2-3795-8207-9883fa376043.roa
File:                     c25d7a46-dff2-3795-8207-9883fa376043.roa (raw, json)
Hash identifier:          KnPHIH2C5pYSVkpMmzX9gLjggYGgrAk9OEMohcO5fII=
Subject key identifier:   FA:01:74:A7:26:57:A8:C7:E6:D5:84:D6:B3:87:1B:3B:54:45:1E:43
Certificate issuer:       /CN=8139fd38-b1a1-4ea2-b95d-7f36fe09dff6
Certificate serial:       010D0C9F4328584CCBA75928E606F5F5D4626360
Authority key identifier: DF:36:92:D7:C0:A4:F1:C6:D1:82:25:BF:46:5C:6B:3D:26:AC:C4:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/c25d7a46-dff2-3795-8207-9883fa376043.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     20184
IP address blocks:        23.130.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:59:28:e6:06:f5:f5:d4:62:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8139fd38-b1a1-4ea2-b95d-7f36fe09dff6
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=c1d11812-890a-4616-8e46-ecf401c592ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:5f:1e:8e:12:35:73:b5:73:6e:1b:f2:b5:
                    d7:40:af:47:c1:7e:96:e3:6a:52:d7:bd:f5:aa:5b:
                    ed:08:6d:ac:c4:0d:78:8f:80:6e:d6:14:50:3a:a7:
                    af:55:c6:f1:14:c7:72:6c:c4:36:8f:c5:eb:04:de:
                    5c:52:d2:12:fa:23:d0:04:2b:1e:ec:37:3d:2d:54:
                    23:ea:b8:34:20:27:09:cf:69:03:62:ed:bd:43:ce:
                    b0:74:16:b5:af:9e:a9:91:5d:0a:92:90:44:83:e7:
                    ac:30:38:58:1f:c9:cc:75:be:8e:c9:dd:57:9d:2d:
                    77:e3:07:a8:45:0b:9a:31:bc:f2:c9:7c:e6:f6:d6:
                    5f:b8:d3:95:b3:b0:47:a4:61:55:8f:3f:40:51:36:
                    b7:24:56:01:2f:71:7c:dd:4b:7b:35:e4:33:05:c8:
                    e9:78:43:9e:c8:e8:a3:2a:e1:8f:2d:96:77:fb:bf:
                    59:cb:8d:e6:26:cd:26:ed:e9:b3:4e:74:b0:de:bc:
                    85:67:4b:71:eb:f2:e8:a5:c2:58:70:69:37:df:91:
                    31:6a:62:42:2d:c8:98:5c:85:37:2c:18:a5:b9:d3:
                    ab:a1:05:65:c4:7c:80:b6:09:4f:7b:90:2f:ce:01:
                    d0:51:56:5a:d1:79:e0:80:e2:f2:d7:b8:e7:88:0a:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:01:74:A7:26:57:A8:C7:E6:D5:84:D6:B3:87:1B:3B:54:45:1E:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/c25d7a46-dff2-3795-8207-9883fa376043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.crl

            X509v3 Authority Key Identifier:
                keyid:DF:36:92:D7:C0:A4:F1:C6:D1:82:25:BF:46:5C:6B:3D:26:AC:C4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:c5:2c:d4:ed:30:c1:a9:9f:23:c1:82:6e:63:e7:1c:74:
         5d:3d:c1:e8:79:a6:bb:bb:08:1a:1c:76:88:ad:a2:53:3d:73:
         70:47:f1:c7:65:4d:59:20:cc:83:4f:b1:09:06:08:e8:48:26:
         84:34:14:2d:4d:e7:86:6e:a4:80:ef:c2:f8:f6:c2:db:61:ce:
         ed:a3:06:18:de:2a:55:b2:d1:47:b0:f0:ec:d1:e3:0c:63:5d:
         64:08:36:09:ad:ab:98:b0:a9:c3:40:65:a0:bf:d9:82:c5:7f:
         c4:db:b6:72:9a:2f:bc:21:5e:87:da:ba:3d:ad:1c:c9:be:88:
         d2:58:68:06:05:c4:73:4e:2d:35:d4:97:c1:1d:d2:cf:7b:ed:
         40:49:c4:36:6f:b3:e4:0c:70:ec:67:10:37:66:ef:4d:de:5a:
         a7:3c:6e:72:74:66:7c:d8:ba:b0:4a:74:0d:fe:86:5c:e4:d3:
         98:80:90:ef:5a:b0:e6:9a:c3:b0:dc:6b:c3:39:6e:c9:28:94:
         c4:5f:d9:7a:3d:28:99:14:6e:77:ea:d5:b4:9f:7d:0e:bb:d9:
         48:34:71:ff:8b:ed:65:ca:5c:a1:e2:cf:73:c0:af:60:20:24:
         bb:47:1a:ed:69:5e:5b:a3:78:cc:10:85:98:f9:4a:f9:12:c9:
         2a:ff:34:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:44 2026 by rpki-client